|
Posted by SJS on October 23, 2005, 4:37 pm
If you were Registered and logged in, you could reply and use other advanced thread options
My Symantec antivirus detected an instance of the W32.Spybot.UBH on my
machine, however, it could only quarantine it, not delete it altogether. I
have been following the instructions on Symantec' website
(http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.ubh.html)
which, at one point, require deleting
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ENUM\ROOT\LEGACY_SVKP
Unfortunately, RegEdit just won't allow me. When I locate the key, and press
delete, I get an 'Error Deleting Key' popup message. Any suggestion? As
always, thank you in advance for your ideas.
|
|
Posted by Leythos on October 23, 2005, 4:40 pm
If you were Registered and logged in, you could reply and use other advanced thread options
[dot]com> says...
> My Symantec antivirus detected an instance of the W32.Spybot.UBH on my
> machine, however, it could only quarantine it, not delete it altogether. I
> have been following the instructions on Symantec' website
> (http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.ubh.html)
> which, at one point, require deleting
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ENUM\ROOT\LEGACY_SVKP
>
> Unfortunately, RegEdit just won't allow me. When I locate the key, and press
> delete, I get an 'Error Deleting Key' popup message. Any suggestion? As
> always, thank you in advance for your ideas.
Reboot in SAFE MODE and run AV software again.
Then, in SAFE MODE, edit the registry again.
--
spam999free@rrohio.com
remove 999 in order to email me
|
|
Posted by =?Utf-8?B?YW9uZQ==?= on October 25, 2005, 2:19 am
If you were Registered and logged in, you could reply and use other advanced thread options
Thanks
sachin
"Leythos" wrote:
> [dot]com> says...
> > My Symantec antivirus detected an instance of the W32.Spybot.UBH on my
> > machine, however, it could only quarantine it, not delete it altogether. I
> > have been following the instructions on Symantec' website
> >
(http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.ubh.html)
> > which, at one point, require deleting
> > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ENUM\ROOT\LEGACY_SVKP
> >
> > Unfortunately, RegEdit just won't allow me. When I locate the key, and press
> > delete, I get an 'Error Deleting Key' popup message. Any suggestion? As
> > always, thank you in advance for your ideas.
>
> Reboot in SAFE MODE and run AV software again.
>
> Then, in SAFE MODE, edit the registry again.
>
> --
>
> spam999free@rrohio.com
> remove 999 in order to email me
>
|
|
Posted by Leythos on October 25, 2005, 6:21 am
If you were Registered and logged in, you could reply and use other advanced thread options
> Good one
> Thanks
> sachin
Here's another thing - if you can't delete the registry key, then reboot
from CD, select repair, go to the console, then delete the file that you
were trying to remove via the registry entry. Once you do this, reboot
in safe mode, remove the registry entry. If you do this, the file should
not be able to load and reinsert itself in the registry.
--
spam999free@rrohio.com
remove 999 in order to email me
|
|
Posted by Doug Knox MS-MVP on October 23, 2005, 5:05 pm
If you were Registered and logged in, you could reply and use other advanced thread options
username has full control. If not, modify the permissions. If your =
username isn't listed, click Add and add it to the list with Full =
control.
--=20
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart =
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
"SJS" <sjs[at]yahoo[dot]com> wrote in message =
> My Symantec antivirus detected an instance of the W32.Spybot.UBH on my =
> machine, however, it could only quarantine it, not delete it =
altogether. I=20
> have been following the instructions on Symantec' website=20
> =
(http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.ubh.h=
tml)=20
> which, at one point, require deleting=20
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ENUM\ROOT\LEGACY_SVKP
>=20
> Unfortunately, RegEdit just won't allow me. When I locate the key, and =
press=20
> delete, I get an 'Error Deleting Key' popup message. Any suggestion? =
As=20
> always, thank you in advance for your ideas.
>=20
>=20
>=20
>
|
| Similar Threads | Posted | | Worm VB.AS Aliases W32.Alcra.B and W32/Alcan.worm!p2p | July 18, 2005, 8:37 am |
| Regedit will not run | November 4, 2005, 8:44 am |
| regedit | May 15, 2007, 10:19 am |
| WORM/DELF.FPV - new worm?? | January 14, 2008, 6:58 am |
| Uninstall/removal of MRT (Microsoft Malicious Software Removal Tool) | November 13, 2006, 9:03 am |
| new worm? | June 20, 2006, 5:09 am |
| new worm i think | November 22, 2006, 6:15 pm |
| RE NEW WORM | November 23, 2006, 5:24 pm |
| Worm? | November 11, 2008, 1:17 pm |
| Virus/worm? | October 25, 2005, 2:29 am |
|
XML site map